Overview

• Introduction
• Useful definitions
• Cookies
• Plugins and social media
• Processing Personal Data by Laurens Coster
• Who we may transfer your Personal Data
• Rights of persons whose data is processed by Laurens Coster
• Information clause
• Information clause in the recruitment process
• Contact with Laurens Coster

Introduction

The Policy has been developed based on the provisions of the GDPR. The Operator of the website located at the address (hereinafter: Website), and the Controller of the Personal Data collected through the Website is:

Laurens Coster Sp. z o.o. with its registered office in Warsaw (01-552) at Plac Inwalidów 10, entered in the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, XII Commercial Division of the National Court Register, under KRS No. 0000396367, NIP: 7010317469, REGON: 145830835, with share capital of PLN 50,000.00 (hereinafter: Laurens Coster).

Laurens Coster is a company that is committed to providing an appropriate level of privacy protection for users of the Website. We believe that this Policy will fully explain to you how the processing and protection of Personal Data work in our company. The data processing policy applicable at Laurens Coster has been established on the legal basis of GDPR regulations and best practices. By familiarizing yourself with the Policy, you will know what actions we take in respect of Personal Data. These actions are intended to ensure security and fulfillment of obligations incumbent on Laurens Coster as a data Controller.

You should read this Policy before using the Website. Please be advised that if you use our Website, this means that you accept the Policy. However, if after reviewing the Policy, you find it to be unacceptable, you may not continue to use our Website.

If you have any questions or concerns regarding this Policy, you may contact us. Contact information is located in the Contact Laurens Coster section.

Useful definitions

Personal Data – information about an identified or identifiable natural person, defined in accordance with the GDPR and Polish regulations on the protection of personal data, e.g. name, surname, identification number, factor determining mental or physiological identity, IP address.

Policy – this document.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Website – a website available at https://www.laurenscoster.com, with an SSL certificate installed, which, by encrypting data, secures your Personal Data and their transmission.

User – a person who uses the Website.

Cookies

The Website uses cookies in order to provide you with services of the highest quality. Files of cookies (so-called "cookies") are IT data, in particular text files, which are stored in the final device of the Website User and are intended for use on websites.

Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number. Laurens Coster is the provider who places and accesses cookies on the Website User's terminal equipment.

We use cookies for the following purposes:

• creating statistics to understand how Users use the Website, which allows us to improve the Website's structure and content.
• defining Users' profiles to display relevant materials in ad networks, especially on the Google ad network. Also, we evaluate if Users have seen specific ads and visited the advertiser's website based on cookies.

The Website uses two main types of cookies:

• session cookies - temporary files stored on the User's end device until the User logs out, leaves the Website, or turns off the browser software.
• persistent cookies - files stored on the User's end device for a time period configured in cookie files' parameters or until their deletion by the User.

Web browsers usually allow the storage of cookies on the User's end device by default. Website Users can change their settings in this regard. The web browser allows deleting cookies. It is also possible to block cookies automatically. Detailed information on this subject can be found in help or documentation of the web browser used. For your convenience we present below sample information on managing cookies for the most popular browsers:

• Chrome
• Firefox
• Safari.

Changes in the settings of cookies can, however, affect the operation of the site you are viewing. Cookies do not change the configuration of the device you are using. They make it easier to adapt the browsed content to your expectations and preferences, e.g. language version, proper display of a page on a device, interests or individual needs. Cookies used for authentication enable e.g. easy form filling or logging in.

Cookie files stored on the User's end device can also be used by partners cooperating with the Website Operator.

The Website collects information voluntarily provided by the User through forms available on the Website. Please note that the Website may also record information about your connection parameters (time stamp, IP address). The data provided on the form may constitute a collection of potential clients of Laurens Coster. The data provided on the form is processed for a purpose stemming from the function of the specific form, e.g., to process a request or to conduct a business contact.

Plugins and social media

Social media are one of the main channels of contact with our customers and potential customers. Through them we provide up-to-date information about our activities, services, promotions, news about our services and create a place for common exchange of ideas.

Therefore, on the basis of legitimate interests, we process Personal Data of people who use our pages on social networking sites (e.g., to respond to comments and inquiries) and data that we access if you use the social networking plug-in available on our Website (for statistics regarding our Website).

The processing of Personal Data on social networking sites is subject to the privacy policies of the respective social networking provider. Therefore, we encourage you to read the policies of the providers of the portals on which we have our pages:

• Facebook, whose provider is Meta Platforms Inc. (1601 S. California Ave, Palo Alto, CA 94304, United States of America) and for users from the European Union Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) | Privacy policy, Information on statistics
• Twitter, whose provider in the European Union, EFTA countries and the United Kingdom is Twitter International Company (One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland), and for other users Twitter Inc (1355 Market Street, Suite 900, San Francisco, CA 94103 United States of America) | Privacy policy
• LinkedIn, whose provider is LinkedIn Corporation (1000 W. Maude Avenue, Sunnyvale, CA 94085, United States of America) and for users in the European Union, European Economic Area and Switzerland LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland) | Privacy policy

• Instagram, whose provider is Meta Platforms Inc. (1601 S. California Ave, Palo Alto, CA 94304, United States of America) and for users from the European Union Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) | Privacy policy

If you use our pages on social networks, Laurens Coster also acts as a Controller of Personal Data. This data is processed by us under the terms of the Policy.

Please be informed that, with regard to the processing of Personal Data in connection with your use of the social plugins available on our Website, i.e. for the purpose of so-called web tracking (if any), Laurens Coster and the provider of the social network you use to request information about our company act as joint controllers of the Personal Data in accordance with Article 26 of the RODO. Web tracking also takes place if you use the plug-in as a non-logged-in user of the social network.

Web tracking involves creating aggregate statistics based on events recorded by social networking providers as users access the website. You need to know that these events are recorded by the social network providers without Laurens Coster's involvement. You will find information regarding the processing of Personal Data by the social network provider, how to contact the provider, and how to object in the provider documents indicated above.

On our Website we also use:

• Google Tag Manager
• Google Analytics
• Albacross
• LinkedIn Insight
• Facebook ID
• Twitter Universal Website Tag

Using Google Analytics software, our Website places a counting code on your computer to collect data about you. Please be advised that we are party to an agreement with Google Inc. and we use a mechanism to anonymize the user's IP number. You may object to the collection of data by Google Analytics software at any time by changing your browser settings. Information about Google Analytics is available here.

Regarding the information about your preferences collected by the Google advertising network, you can view and edit the information resulting from the cookies using a tool.

We recommend that Users review the above privacy policies of each of these third-party tools and services to understand the use of cookies used by these tools and social plugins. You can object to data collection at any time by changing your browser settings.

Processing Personal Data by Laurens Coster

When you provide us with your Personal Data, we become their Controller.

Laurens Coster's basis for processing your Personal Data may be:

• Your consent (if applicable),
• the relevant legal provision (e.g. the grounds indicated by Article 6 of the GDPR) or
• the fact that the processing is necessary for the performance of a contract or taking steps prior to entering into a contract.

We may process your Personal Data, depending on the basis of our contact, for the purposes of:

• providing services related to our business, e.g. by providing your Personal Data, you enable us to contact you in order to present our offer,
• marketing, so that we can inform you about the best and latest offers and functionalities provided by our partners, e.g. in the form of a newsletter,
• statistics related to the operation of the Website.

More details are provided in the section Information clause.

The maximum scope of Personal Data we process depends on the basis of our relationship and includes:

• name, surname, company name, e-mail address, telephone number, position, tax identification number, information about your services, information about your company data (company size, number of employees, contact details of people responsible for cooperation with Laurens Coster);
• if you provided data in the contact form/messengers: name, surname, e-mail address, telephone number, company name, information about your company data;
• if you give us a consent for processing data for marketing purposes: name, surname, e-mail address, telephone number;
• if you use our Website: IP address, device information, cookies, other data that you provide e.g. by filling in the contact form on our Website.

Please be advised that we do not process specific categories of your Personal Data referred to in Art. 9-10 of the GDPR, such as: ethnic origin, political views or biometric data.

By using our contact forms or the messengers available on the Website, contacting us via our social media profiles, you consent to the processing of Personal Data by us.

If we ask you to provide Personal Data on our Website (e.g. for the use of the contact form), you must know that providing it is a condition for concluding an agreement to access the functionalities available on our Website. If you do not provide this data, you will be, unfortunately, unable to use them.

The period for which Personal Data may be stored depends on the legal basis for processing your Personal Data and the purpose for which they are processed. More details are provided in the section Information clause.

Who we may transfer your Personal Data

Please also be informed that from time to time we may transfer or share your Personal Data with entities that cooperate with us e.g. accounting companies, legal advisors, courier companies, advertising and marketing companies, hosting providers, payment providers. The transfer may take place only when we have concluded appropriate agreements with these entities in order to ensure that they will protect your Personal Data at least as responsibly as we do.

Personal Information may also be shared by Laurens Coster with government authorities or other entities authorized to access the data under the law.

Transfers to such entities may only take place after we have obtained your consent (where required) or where such admissibility is provided for by law, e.g. where Laurens Coster processes data on the basis of a legitimate interest.

As we use tools for our daily operations whose providers may process Personal Data outside the European Economic Area, your Personal Data may also be transferred for processing outside the European Economic Area. In this case, we ensure that the processing is carried out on a lawful basis, such as standard contractual clauses. Please also note that such transfer may only take place if the third country or international organization meets the conditions set out in the RODO.

Rights of persons whose data is processed by Laurens Coster

If you consent to the processing of Personal Data, remember that the consent is given by you voluntarily. You have the right to withdraw your consent at any time. Remember, however, that the withdrawal of consent does not affect the processing carried out by us prior to the withdrawal.

You have the right to access your Personal Data at any time. You can always ask us, as the controller of your Personal Data, to inform you whether your Personal Data is being processed by us, to provide you with access to your Personal Data, and to receive other information such as, but not limited to, the duration of the processing, the purposes of the processing, information on to whom we provide the data, information on automated decision-making or profiling.

Remember that you also have the right to lodge a complaint with the supervisory body (the President of the Personal Data Protection Office).

You have the right to rectify your Personal Data by changing or supplementing it.

You have the right to delete your Personal Data, known as the “right to be forgotten”. You can request us to delete your data without undue delay in the following situations:

• the data is not necessary for the purpose of processing or is processed in a different way
• consent to processing has been withdrawn previously, and we have no basis for processing
• you have objected to data processing
• the data was processed unlawfully
• the personal data controller is obliged to delete data resulting from legal provisions
• the data was collected in relation to the offering of Information Society services.

More details about the right to be forgotten can be found in Art. 17 of the GDPR.

You also have the right to restrict processing by the controller. You can request a restriction when:

• you question the accuracy of the data
• the processing is unlawful, but you are opposed to deletion by only requesting a restriction
• the controller no longer needs the data for processing purposes, but you need them to establish, assert or defend claims
• you object to processing, but only until its grounds are resolved.

If the processing is performed based on consent or in an automated manner, you also have the right to transfer data that we should provide to you at your request in a commonly used format. You can also request that the data be transferred by us directly to another controller.

If the processing is based on Article 6(1)(e) or (f) of the RODO, you have the right to object to the processing. In this case, we can no longer process your Personal Data unless we demonstrate the grounds required by the RODO.

You also have the right not to be subject to a decision based on automatic processing, including profiling, if such a decision has legal effects on you or otherwise significantly affects you. Please be advised that this right does not apply if: such a decision is necessary for the performance/conclusion of the contract, is permitted by law or is based on your express consent.

Information clause

Controller’s data

The Controller of the personal data is Laurens Coster Sp. z o.o. seated in Warsaw at Plac Inwalidów 10, 01-552 Warsaw, entered into the register of entrepreneurs kept by the District Court for the capital city of Warsaw XII Division of the National Court Register, under the KRS number 0000396367, NIP: 701-031-74-69, REGON: 145830835.

Purpose of processing

Depending on the circumstances, the provided personal data may be processed for the purposes of:

• answering questions asked in the forms/via messengers available on the Website,
• receiving marketing e-mails (newsletters), if you consent to it,
• conducting sales talks via emails, social media or phone calls.

Please be advised that providing data in the contact forms is voluntary, but necessary to use the forms available on the Website.

Legal basis and time of the processing

• We process the data provided in the contact form/via messengers based on the legitimate interest of the controller, which is communication with users of our website or social media. We will process your data for the time necessary to provide an answer to your question. After this time, the data may be processed by us during the limitation period for any claims.
• We process the data used for the purpose of sending the newsletter until consent to the processing of this data is revoked.
• We process data obtained for the purpose of concluding and performing a contract with a customer/contractor for the duration of the contract. After this time, the data can be processed by us for the period of limitation of possible claims.
• We process the data obtained during sales talks via email, social media or phone calls after obtaining your consent or on the basis of Laurens Coster legitimate interest (e.g. when we answer your questions about services or carry out our activities aimed at acquiring customers). We process the data for the time necessary to examine the needs of our customers and determine the willingness to start the cooperation with us. After this time, the data may be processed by us during the limitation period for any claims.

Personal Data recipients

The recipients of your data may be relevant state authorities operating on the basis of generally applicable law. Your data may also be transferred to entities, as defined within Who we may transfer your Personal Data to part, processing data at the request of the controller - remember, however, that such entities process data on the basis of a contract with the controller and only in accordance with his/her instructions.

Processing data outside the EEA

Due to the fact that for our business we use tools whose suppliers may process Personal Data outside the European Economic Area, your Personal Data may also be transferred for processing outside the European Economic Area. In this case, we make sure that the processing takes place on a legal basis, which are, for example, standard contractual clauses.

Rights of data subject

You have the right to request the controller to access your personal data, rectify it, delete it or restrict the processing of, as well as the right to withdraw consent if it is expressed and a complaint is lodged with the supervisory body (for Poland: President of Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw). In matters related to data protection, you can contact us at: iod@laurenscoster.com

Information clause in the recruitment process

If you are participating in the Laurens Coster recruitment process or have sent us your application documents yourself, please read this information clause.

Controller’s data

The Controller of the personal data is Laurens Coster Sp. z o.o. seated in Warsaw at Plac Inwalidów 10, 01-552 Warsaw, entered into the register of entrepreneurs kept by the District Court for the capital city of Warsaw XII Division of the National Court Register, under the KRS number 0000396367, NIP: 701-031-74-69, REGON: 145830835.‍

Purposes and period of processing

Personal data will be processed in order to conduct the recruitment process. The data contained in the application documents will be processed by us for the duration of the recruitment process and for a period of 6 months after its completion, and in the case of consent from the candidate for future recruitment for 2 years.

Providing personal data is voluntary and necessary to handle your inquiry, and the basis for data processing is your consent.

Recipients of personal data

Recipients of your data may be relevant state authorities acting on the basis of generally applicable law. Your data may also be transferred to entities processing data on behalf of the controller, as mentioned in the section To whom we may transfer Personal Data - please note, however, that such entities process data on the basis of a contract with the controller and only in accordance with the controller's instructions.

Processing data outside the EEA

Due to the fact that for our business we use tools whose suppliers may process Personal Data outside the European Economic Area, your Personal Data may also be transferred for processing outside the European Economic Area. In this case, we make sure that the processing takes place on a legal basis, which are, for example, standard contractual clauses.

Rights of data subject

You have the right to request the controller to access your personal data, rectify it, delete it or restrict the processing of, as well as the right to withdraw consent if it is expressed and a complaint is lodged with the supervisory body (for Poland: President of Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw). In matters related to data protection, you can contact us at: iod@laurenscoster.com

Specimens of the consents that the candidate should/can give by sending us the application documents:

Current recruitment process – consent mandatory:

I agree and my consent is freely-given, to processing my personal data from application documents by Laurens Coster Sp. z o.o. with a registered office in Warsaw (01-552), Plac Inwalidów 10 for the purpose of the current recruitment process conducted by Laurens Coster sp. z o.o. I have read the information clause.

Future recruitment process – consent optional:

I agree and my consent is freely-given, to processing my personal data from application documents by Laurens Coster Sp. z o.o. with a registered office in Warsaw (01-552), Plac Inwalidów 10 for the purpose of a future recruitment process conducted by Laurens Coster sp. z o.o. I have read the information clause.

Contact with Laurens Coster

Laurens Coster, acting as data controller, has appointed a Data Protection Officer to ensure the security and correctness of the processing of Personal Data.

All inquiries and requests related to the processing of Personal Data can be directed to:

• postal address: Laurens Coster Sp. z o.o., Plac Inwalidów 10, 01-552 Warsaw
• e-mail address: iod@laurencoster.com

We may change our Policy from time to time to take account of the changing legal and technological environment. However, the most up-to-date version will always be available on our Website.